Research And Implementation Of Android System Virtualization Based On The Security Container Technique

With the development and progress of intelligent devices, the hardware configuration of smartphones is more highly. As Android system is an open source and free system, most mobile phone manufacturers have adopted Android system as a smartphone operating system. However, due to the scenarios and needs of users are constantly changing, a smartphone who only has one operating system not only unable to meet the increasingly complex needs of users, but also can`t protect user privacy data well. To solve the above problems and meet the multiple scenarios demand of users, this dissertation introduces an embedded virtualization technology, which can run multiple operating systems on one device simultaneously.Virtualization technology can run multiple operating systems simultaneously on one device, data and files between different operating systems can be isolated by partitioning technology to make the system operate independently from each other. One system that suffers a malicious attack or crash will not affect the other systems. So it can improve the security for whole system. But the performance requirements of embedded devices are more stringent, so multiple systems running simultaneously cannot affect the user experience. For traditional virtualization technology, such as KVM and Xen have a high consumption of system resources and low efficiency. And full virtualization technology requires CPU support, paravirtualization must modify kernel. The lightweight virtualization container technology is not only more efficient, but also easier to implement and less code. So, this dissertation introduces the container technology to complete Android virtualization.In order to make multiple Android systems can run simultaneously, this dissertation designs and implements Android virtualization based on Linux container technology. Firstly, this dissertation makes a detailed analysis of Linux Container technology and Aufs file system. And this dissertation designs a multi- Android system architecture according to the container technology. Then, in order to make multiple systems can simultaneous access specific devices, a new namespace is implemented in the Linux kernel of Android system. And this dissertation proposes a realization method of virtualization to achieve the reuse technology of Frame Buffer, Binder and GPU. Then, this dissertation utilizes the virtualization technology of Frame Buffer to achieve a fa st switching technology between multiple Android systems, which is user- friendly and enhances the user experience. Then, in order to ensure the functions of multiple systems diversification, a proxy mechanism of device is proposed for closed source drivers. The proxy mechanism can achieve reuse of the third third-party devices, such as a SIM card, WiFi and Camera. Finally, this dissertation implements a prototype system system and conducts extensive testing on Google Nexus 4. And the experimental results show that the proposed method is feasible and effective.